Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/25B808B9D99A720942CE56F3E53C2699
HistoryJul 09, 2019 - 12:00 a.m.

Security fix for the ALT Linux 10 package firefox-esr version 60.8.0-alt1

2019-07-0900:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
23

EPSS

0.69

Percentile

98.0%

July 9, 2019 Andrey Cherepanov 60.8.0-alt1

- New ESR version (60.8.0).
- Fixed:
  + CVE-2019-9811 Sandbox escape via installation of malicious language pack
  + CVE-2019-11711 Script injection within domain through inner window reuse
  + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects
  + CVE-2019-11713 Use-after-free with HTTP/2 cached stream
  + CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  + CVE-2019-11715 HTML parsing error can contribute to content XSS
  + CVE-2019-11717 Caret character improperly escaped in origins
  + CVE-2019-11719 Out-of-bounds read when importing curve25519 private key
  + CVE-2019-11730 Same-origin policy treats all files in a directory as having the same-origin
  + CVE-2019-11709 Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8